You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by GitBox <gi...@apache.org> on 2021/04/12 18:30:05 UTC

[GitHub] [hadoop] steveloughran commented on pull request #2895: HADOOP-17633. Bump json-smart to 2.4.2 due to CVEs

steveloughran commented on pull request #2895:
URL: https://github.com/apache/hadoop/pull/2895#issuecomment-818032692


   I  worry about the lines on the json-smart import
   ```xml
           <!-- HACK.  Transitive dependency for nimbus-jose-jwt.  Needed for
                packaging.  Please re-check this version when updating
                nimbus-jose-jwt.  Please read HADOOP-14903 for more details.
             -->
   ```
   The assumption here is: nimbus-jose-jwt needs to be updated in sync, and kerby. Are there any related JIRAS/issues we could reference there?
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org